Enterprise Risk Management, Compliance, and Privacy Officer

State of Oklahoma • Oklahoma City, OK

7d • $82,253 • Onsite

About The Position

The Enterprise Risk Management, Compliance, and Privacy Officer is responsible for developing, implementing, and overseeing an integrated framework for enterprise risk management, compliance, and records management. This position works directly with the Director of Enterprise Risk Management and Compliance, with responsibility including enterprise risk management, compliance, and records management, as well as serving as the OSDH Privacy Officer. The Enterprise Risk Management and Compliance Officer is a senior level position at the Oklahoma State Department of Health (OSDH). Reporting directly to the Director of Enterprise Risk Management & Compliance, this role plays a strategic role in facilitating organizational risk assessments, developing key controls and audits in relation to enterprise risk management and compliance, as well as leading the required needs of the Records Management division.

Requirements

• Education and experience at this level include a master’s degree in Compliance, Business Administration, Finance or Healthcare Compliance, or a similarly related field, plus seven or more years of experience in compliance, risk management, healthcare regulation, or government oversight are required.
• Knowledge of risk and compliance as it pertains to enterprise risk management; of agency wide program evaluation; and of various compliance functions across the agency.
• Ability is required to exercise good judgment in analyzing situations and making decisions; to organize and present facts and opinions clearly and concisely, both orally and in writing; to establish and maintain effective working relationships with other agency personnel and governmental representatives; to organize and conduct several projects simultaneously; and to develop and administer programs.
• Employees must be willing to complete all job-related travel associated with this position.
• Being present at the office is an essential function of the job.

Nice To Haves

• Professional certifications such as: Certified Compliance & Ethics Professional (CCEP); Certified Risk Management Professional (CRMP); Certified Internal Auditor (CIA); Certified Healthcare Compliance (CHC) are recommended.
• Experience developing enterprise risk or compliance programs in healthcare or government settings as well as experience supporting executive leadership and regulatory audit processes is also recommended.

Responsibilities

• Work alongside the Director of ERM and Compliance to develop and expand the agency’s comprehensive Enterprise Risk Management (ERM) program, within the COSSO framework, identifying and mitigating potential risks across operational, regulatory, reputational, and strategic domains.
• Develop and maintain enterprise risk registers, risk prioritization frameworks, and mitigation tracking systems.
• Lead records management retention and compliance with the Oklahoma Open Records Act and applicable federal requirements, including document retention, access, and destruction policies. This will require working directly with Department of Libraries to ensure compliance within the State of Oklahoma requirements and regulations.
• Collaborate with internal stakeholders to develop comprehensive risk mitigation strategies and internal controls aligned with agency goals and public health responsibilities.
• Serve as a liaison for audits, investigations, regulatory inquiries, and legislative reviews involving enterprise risk management and/or compliance.
• Be available to assist with the safety and security function, as needed, helping to ensure physical safety and staff security across all OSDH locations.
• Commission and participate in audits established to investigate and monitor compliance with privacy standards and procedures required by federal and state law.
• Direct efforts to communicate and promote understanding of the components of the privacy standards, laws, and regulations, and consequences of noncompliant behavior through written materials and training programs.
• Consult with Office of General Counsel, as necessary, with regard to the privacy standards and other applicable federal and state law to ensure transparency and coordination.
• Assist management with implementation of the privacy policies and procedures to ensure compliance with applicable federal and state law.
• Coordinate on a regular basis with ESS – HIPAA Security Officer on all appropriate privacy related items to ensure collaboration and coordination.
• Being present in the office is an essential function of the job.
• Other duties as assigned.
• Demonstrates knowledge of and supports mission, vision, value statements, standards, policies and procedures, operating instructions, confidentiality standards, and the code of ethical behavior.
• Works effectively in team environment, participating and assisting their peers.

Benefits

• Generous state paid benefit allowance to help cover insurance premiums.
• A wide choice of insurance plans with no pre-existing condition exclusions or limitations.
• Flexible spending accounts for health care expenses and/or dependent care.
• Retirement Savings Plan with a generous match.
• 15 days of vacation and 15 days of sick leave the first year for full time employees.
• 11 paid holidays a year.
• Student Loan repayment options & tuition reimbursement.
• Employee discounts with a variety of companies and venders.
• Longevity Bonus for years of service

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level